Vulnerability history

Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint vulnerability

Contributor+ User Email Disclosure via geodir_json_search_users vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS) vulnerability

Editor+ Stored XSS via Place Categories vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision vulnerability

Server Side Request Forgery (SSRF) vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment vulnerability

Unauthenticated SQL Injection vulnerability

Contributor+ Stored XSS vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode vulnerability

SQL Injection vulnerability

Admin+ SQLi vulnerability

Contributor+ Stored XSS via Shortcode vulnerability

CSV Injection vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability